Category: SIEM & Log Analysis

Category: SIEM & Log Analysis

All from controlled labs to real-world incident analysis, focused on detection, investigation, and response.

Snort Rules: Powerful IDS/IPS Traffic Detection and Threat Blocking

Snort Rules Writing: Lab walkthrough covering IDS/IPS alert triage, reverse shell threat detection, brute-force blocking, and custom Snort rules.

View >>

SOC Level 1 Journey: Blue Team & SIEM with Lessons, Mistakes & Wins

30 days THM SOC Level 1 journey into Blue Team operations, SIEM log analysis, phishing detection, and real-world cyber defense scenarios.

View >>

Building a SOC Detection Lab with Sysmon and Microsoft Sentinel

Documentation and implementation of a personal SOC detection lab using Windows telemetry and cloud-native SIEM monitoring.

View >>